Re: Can I refuse all connections except replication?

Hi Dave: I don't know in AIX but in linux you can use iptables to deny access to the server port to all incoming IP except the main server. # iptables -A INPUT -s <server ip> -p tcp --destination-port <port> -j ACCEPT # iptables -A INPUT -p tcp --destination-port <port> -j DENY You can check the AIX firewall. HTH ----- Original Message ----- From: <dthacker@omnihotels.com> To: <informix-list@iiug.org> Sent: Friday, September 26, 2003 1:05 PM Subject: Can I refuse all connections except replication? > Informix 9.30 running on AIX 4.3.3 > I have two instances running EDR in update anywhere mode. All > connections are usually made to the "primary" instance. The > transactions flow from the "primary" to the "backup" unless we declare > a disaster. We use internal DNS to control where the various clients > on our WAN "see" the primary server. When we run a DR drill, we > change the DNS entry for the "primary" to the "backup". When the > drill is over we flip the DNS entry back. Many servers cache the > "disaster mode" DNS and we've found they continue to connect to > "backup" after DNS is changed. > > I've been asked by management if there is a way to block all TCP/IP > connections to the database *except* for replication connections. When > we resume normal operations, we'd like the "backup" database to refuse > all connections except those sending replication transactions from > the primary server. > > I don't see a mode like this anwhere in the Administrators Guide, Is > there a way to do this? > > TIA > > Dave Thacker sending to informix-list